CVE-2004-1814

Name of the Vulnerable Software and Affected Versions VocalTec VGW4/8 Gateway version 8.0

Description A directory traversal issue allows remote attackers to read protected files by using .. (dot dot) sequences in an HTTP request. This has been demonstrated using the home.asp file.

Recommendations For VocalTec VGW4/8 Gateway version 8.0, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of HTTP requests that contain .. (dot dot) sequences.